nerdexam
Palo_Alto_Networks

PCNSA · Question #274

What are two valid selections within an Anti-Spyware profile? (Choose two.)

The correct answer is B. Drop D. Default. Within an Anti-Spyware profile, 'Drop' and 'Default' are valid actions for configuring responses to detected spyware threats.

Submitted by zhang_li· Apr 18, 2026Configure

Question

What are two valid selections within an Anti-Spyware profile? (Choose two.)

Options

  • ARandom early drop
  • BDrop
  • CDeny
  • DDefault

How the community answered

(63 responses)
  • A
    6% (4)
  • B
    90% (57)
  • C
    3% (2)

Why each option

Within an Anti-Spyware profile, 'Drop' and 'Default' are valid actions for configuring responses to detected spyware threats.

ARandom early drop

'Random early drop' (RED) is a congestion avoidance mechanism primarily used in QoS and routing, not a specific action within an Anti-Spyware profile for threat response.

BDropCorrect

'Drop' is a specific action within an Anti-Spyware profile that silently discards malicious packets, preventing them from reaching their destination without notifying the sender.

CDeny

'Deny' is a general security policy action, but within the granular context of Anti-Spyware profiles, 'block' or 'drop' are more specific threat response actions for malicious traffic.

DDefaultCorrect

'Default' is a selection option that allows the profile to inherit the action defined in the Anti-Spyware signature database or a global default action.

Concept tested: Anti-Spyware profile actions

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/configure-anti-spyware-security-profiles/anti-spyware-security-profile-actions

Topics

#Anti-Spyware#Security Profiles#Threat Prevention#PAN-OS Configuration

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice